CVE-2021-38456CWE-259

Moxa MXview Network Management Software

Critical · published October 12, 2021

CVSS v3.1
9.8
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

🔥 Default passwords lurking in Moxa MXview Network Management software versions 3.x to 3.2.2 can effectively hand over the keys to your kingdom! Think of it like leaving your front door wide open with a sign that says 'Welcome, anyone with the secret code' — a real invitation for mischief! An attacker could saunter in and take control of the entire network management system, potentially leading to unauthorized access, data breaches, or even full system takeover. This is absolutely devastating for your organization's security posture!

Put simply

Think of it like leaving your front door wide open with a sign that says 'Welcome, anyone with the secret code' — a real invitation for mischief! This vulnerability arises from hard-coded passwords that remain unchanged, allowing anyone who knows them to access accounts without any further authentication checks.

What to do

An attacker could saunter in and take control of the entire network management system, potentially leading to unauthorized access, data breaches, or even full system takeover. This is absolutely devastating for your organization's security posture! Immediately update Moxa MXview to version 3.2.3 or later, change all default passwords to secure, unique ones, and regularly audit your access credentials. Don't let the bad guys take advantage! You've got this! Follow these steps to lock it down and boost your security! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01184 · 67.6th percentile
Weakness
CWE-259 · Use of Hard-coded Password
Published
2021-10-12T13:37Z
EPSS history
Timeline
  • 12 OCT 13:37Z
    Moxa MXview Network Management Software
    cvelistv5